OSVDB ID: 4073 Title: Serv-U FTP Server MDTM Command Time Zone Argument Overflow |
Info |
|
|
Dates |
||||
|
|
Description |
The Serv-U FTP server is vulnerable to a remote buffer overflow attack when processing a long time zone argument to the MDTM command. This command is only available to authenticated users (including anonymous) and may be exploited to execute arbitrary code with the privileges of the FTP service. This service often runs with administrative privileges and successful exploitation may result in a loss of confidentiality, integrity, and/or availability. |
Classification |
Location:
Local Access Required,
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity Solution: Upgrade Exploit: Exploit Public, Exploit Commercial Disclosure: OSVDB Verified, Vendor Verified |
Solution |
Upgrade to version 5.0.0.4 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |